Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Framework discloses data breach via Metabase 0-day

community.frame.work

Post reply on HN
Print view View original

51–57 of 57 posts

Re: Framework discloses data breach via Metabase 0-day

#51

Post by akd »

parable wrote: post #24
vermon wrote: post #13

Earlier quoted context omitted.

Just don't use the cloud version of Metabase. You can self host it and not allow accessing it over the internet.

Metabase can be self-hosted, but you cannot self-host Salesforce or Mixpanel or many of the other products I'm referring to. In an ideal world, every company would self-host their own instances of all of their products, since that ultimately forces them to be solely responsible for their customers' data. Using the cloud versions of these products shifts the blame from the company itself to the vendor when things go s…

Salesforce hasn't ever been hacked to the best of my knowledge.

Re: Framework discloses data breach via Metabase 0-day

#53

Post by bravetraveler »

nisegami wrote: post #52
bravetraveler wrote: post #28

Business intelligence, vendor free: I'm done buying from them. Call it harsh, that's fine. That's business, baby.

Who are you gonna buy from instead?

Your point, I suspect, is well-taken: choices are limited. Preference would be... any business which doesn't have the information to leak it in the first place. Retail, cash? Does that still exist? Anyway, this "we'll share excessive information with too many partners" pattern is far too normalized. Eventually I may be forced to choose the forest over buying [or building] another computer.

Realistically, if I had to buy: my employer, probably, given a reasonable discount. Unless you know a business that doesn't eagerly share personally identifiable information [which ends up leaked]... I'll aim for reduction, not resolution. I'm sure you've heard the quip about making Perfect the enemy of Better.

Regardless, and more fairly: with prices squeezed, and the pile of hardware I already own and ignore [including several old-school towers, both Framework desktop/laptop, and Steam Deck/Machine], I'm not foreseeing much shopping. Big loss on their part, I know; wish that was the intention.

Re: Framework discloses data breach via Metabase 0-day

#56

Post by Snacklive »

wkjagt wrote: post #33

At some point I almost bought a Framework laptop, just didn't click the Order button. I had my address etc already filled in, so because of that I also got that email from Framework this morning. From a technical perspective I guess it makes sense that Metabase has my personal information, but it's still kind of crazy to think how much personal information you're sending "out there" just by, for example, checking a f…

same here

Re: Framework discloses data breach via Metabase 0-day

#57

Post by OJFord »

cassianoleal wrote: post #30

I do wonder if this has anything to do with the fact that Framework has taken payment from me 3 days ago, yet my order still shows as "pre-order accepted". No acknowledgement of payment, no shipping ETA.

I'd have expected an email too, but surely 'preorder accepted' acknowledges the payment?
Post reply on HN